Device Posture
The state of a device at the time of access: OS patch level, disk encryption status, EDR presence, jailbreak detection, certificate enrollment. Posture is an input to Zero Trust access decisions.
Posture is the signal that turns "who are you" into "should this device be here", and it is the part of zero trust that most often stays unimplemented because it requires an agent or MDM enrollment on every endpoint. The honest limit is that posture is self-reported by software on a machine the attacker may already control, so it is a strong signal against commodity attacks and a weak one against a determined intruder holding the device.
See also: what is zero trust, conditional access, ZTNA, zero trust vendors
Related on Start with Identity
- GlossaryAdaptive Authentication
Authentication flows that change based on risk signals. Low-risk sign-ins may complete with one factor; high-risk sign-ins escalate to step-up MFA or are blocke
- GlossaryZero Trust
A security model where trust is never assumed based on network location and is continuously re-evaluated. Each access decision considers identity, device postur
- CVEIvanti EPMM (MobileIron Core) unauthenticated API access
Every supported EPMM 11.8-11.10 release exposed restricted API functionality with no login. Attackers pulled user and device data, then chained CVE-2023-35081.
- GlossarymTLS
Mutual TLS. Both the client and server present and validate X.509 certificates during the TLS handshake. The cryptographic identity binding makes mTLS a strong
- CVECyberArk Conjur IAM authenticator bypass via network device
A second Conjur IAM-authenticator bypass, this time through a misconfigured network device. CVSS 9.1. Same Cyata chain as CVE-2025-49827.
- TechniqueDevice code phishing
The victim enters a code on Microsoft's own login page and approves a real prompt. The attacker requested that code from a second device and walks away with acc